General

  • Target

    9ab6059369ffcc6ce9b33deeb3c96990N.exe

  • Size

    74KB

  • Sample

    240909-v4c89asfrc

  • MD5

    9ab6059369ffcc6ce9b33deeb3c96990

  • SHA1

    5864c89d38f65a65e6e2eb938aa034c913034f76

  • SHA256

    43ef8eb3c9791d5ecefc99008e995846c5beaf50add92468684511d213305697

  • SHA512

    7c0579e2ab098754812af10d25167caecac4309979c7a8fdecbc61bfdc1455389f877470271ffe472d9a611a81d84674565627a082ee8bd88a95a23e3021bbef

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPN:ymb3NkkiQ3mdBjFIvl358nLA89OMFVH8

Malware Config

Targets

    • Target

      9ab6059369ffcc6ce9b33deeb3c96990N.exe

    • Size

      74KB

    • MD5

      9ab6059369ffcc6ce9b33deeb3c96990

    • SHA1

      5864c89d38f65a65e6e2eb938aa034c913034f76

    • SHA256

      43ef8eb3c9791d5ecefc99008e995846c5beaf50add92468684511d213305697

    • SHA512

      7c0579e2ab098754812af10d25167caecac4309979c7a8fdecbc61bfdc1455389f877470271ffe472d9a611a81d84674565627a082ee8bd88a95a23e3021bbef

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvuzk358nLA89OGvrFVHmPN:ymb3NkkiQ3mdBjFIvl358nLA89OMFVH8

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks